Europe
Primarily a target
—
52 received·
6 initiated·
2 responses
·44 countries
In the last 60 days, 52 new cyber operations involving Europe were added to the database: a 25% decrease compared to the previous period. The number of operations is currently 14% below the long-term 60-day average. The Intensity of cyber operations involving Europe over the last 60 days is rising to 3.4, compared with 2.9 in the preceding 60-day period. This is above the all-time average for Europe of 2.7.
Maintained by EuRepoC research analysts · updated 05 Oct 2026
For last 60 days, this region appears chiefly as a target — 52 incidents directed at it, 6 it is linked to initiating.
Source: EuRepoC Global Database as of 05 Oct 2026.
01 / 02
6 incidents · as actorCyber activity
Operations EuRepoC links to actors based in Europe, and the international responses they drew.
Cyber incident intensity
Mean2.3/15Moderate
Range 1.0–4.0
Drag the ends of the observed range to narrow intensities.
6 coded incidents · Last 60 days
Database additions by weekincidents linked to Europe
Bar height shows incidents added during last 60 days; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat its operations hit
SectorIncidentsIntensityResponded
Government / ministries
2.5Moderate
0/2
Digital Provider
2.0Moderate
1/2
Civil service / administration
1.0Moderate
1/2
Finance
2.0Moderate
0/2
Corporate Targets
2.5Moderate
0/2
Other
2.0Moderate
0/2
Defence industry
4.0Moderate
0/1
Military
4.0Moderate
0/1
Its operations concentrate on Government / ministries — 2 of 6 incidents.
02 / 02
Operations initiated & responses drawn
NONorwegian Digitalisation Agency
Norway
Norwegian Digitaliseringsdirektoratet Director Frode Danielsen Issues Statement Following DDoS Attack on Digdir's Digital Solutions on 25 August 2026
Operational action
25 Aug 2026
Operational action
25 Aug 2026
NONorwegian Digitalisation Agency
Norway
Norwegian Digitaliseringsdirektoratet Director Frode Danielsen Issues Statement Following DDoS Attack on Digdir's Digital Solutions on 25 August 2026
Server Killers
Norway
·Digital Provider +1
Russian Threat Actors "Server Killers" Conducted DDoS Attack On Norwegian Digitalisation Agency On 24 August 2026
24 Aug 2026
Incident · Low severity
24 Aug 2026
Server Killers
Norway
·Digital Provider +1
Russian Threat Actors "Server Killers" Conducted DDoS Attack On Norwegian Digitalisation Agency On 24 August 2026
(Russia)
Poland
·Other
Russian Or Belarussian Threat Actors Defaced Pilecki Institute's Website In Poland and Germany On 13-14 August 2026
13 Aug 2026
Incident · Low severity
13 Aug 2026
(Russia)
Poland
·Other
Russian Or Belarussian Threat Actors Defaced Pilecki Institute's Website In Poland and Germany On 13-14 August 2026
Cyber Corps (Main Directorate of Intelligence, Ukraine; HUR)
Russia
·Corporate Targets
Ukraine Military Intelligence (HUR) Disrupted Russian E-Commerce Company Wildberries In Russia On 10-11 August 2026
10 Aug 2026
Incident · Low severity
10 Aug 2026
Cyber Corps (Main Directorate of Intelligence, Ukraine; HUR)
Russia
·Corporate Targets
Ukraine Military Intelligence (HUR) Disrupted Russian E-Commerce Company Wildberries In Russia On 10-11 August 2026
Black Spark
Russia
·Finance +3
Pro-Ukrainian Hacktivist Group Black Spark Claimed Breach of Russian Network Monitoring Provider Microolap from July to 19 August 2026
1 Jul 2026
Incident · Low severity
1 Jul 2026
Black Spark
Russia
·Finance +3
Pro-Ukrainian Hacktivist Group Black Spark Claimed Breach of Russian Network Monitoring Provider Microolap from July to 19 August 2026
Georgije Vukov
Croatia
·Civil service / administration +4
Serbian Businessman Possibly Tied To Serbian Intelligence Hacked Into Croatian State Institutions In April 2026
1 Apr 2026
Incident · Low severity
1 Apr 2026
Georgije Vukov
Croatia
·Civil service / administration +4
Serbian Businessman Possibly Tied To Serbian Intelligence Hacked Into Croatian State Institutions In April 2026
Cozy Bear (SVR)
Ukraine
·Defence industry +2
Russia-Linked Cyberespionage Group Cozy Bear Used Claude to Hack Government and Defence Organisations in Ukraine from December 2025 to August 2026
1 Dec 2025
Incident · Low severity
1 Dec 2025
Cozy Bear (SVR)
Ukraine
·Defence industry +2
Russia-Linked Cyberespionage Group Cozy Bear Used Claude to Hack Government and Defence Organisations in Ukraine from December 2025 to August 2026
Showing the 7 most recent of 7
Open all in advanced search